Breach of French Government Messaging Platform Tchap
A multi-vector security breach has compromised Tchap, the mandated secure communication platform for approximately 300,000 French public servants. The incident originated from a successful social engineering attack that allowed a threat actor to hijack a legitimate employee account. Following the takeover, the actor claimed the exfiltration of 650,000 messages, 73,000 account records, and 13.5GB of files. Furthermore, secondary allegations suggest a technical vulnerability exists within the platform, potentially allowing unauthenticated access to media files. This breach underscores the critical risk of identity-based exploitation and the compounding danger of secondary technical vulnerabilities in government-mandated communication infrastructures.